기상청 날씨 (KMA Weather Korea)

• Analyzed: May 11, 2026, 4:34 AM
• Findings: 1
• Version: 2.2.0
• Hash: 6236c869cd73ad5d31cda2a7b63490000af065c250ea1dda1e4b9dd7a601b5d7
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is benign. It accesses an API key from `~/.config/data-go-kr/api_key` (or a hardcoded `/home/scott/...` path in one script, which is a minor bug, not malicious) and makes network requests to legitimate Korean government weather and air quality APIs (`apis.data.go.kr`). All actions, including instructions in `SKILL.md` and `playbook.md`, are aligned with its stated purpose of providing weather forecasts and air quality information. There is no evidence of data exfiltration to unauthorized endpoints, malicious execution, persistence mechanisms, prompt injection attempts, or obfuscation.